Skip to main content

Allocation of Resources Without Limits or Throttling

CVE-2025-58446

Medium
6.9/10

Summary

xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer processes large grammars (>100k characters) at very low rates, and can be used for Denial-of-Service (DOS) of model providers.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-770 - Allocation of Resources Without Limits or Throttling

The software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References

Advisory Timeline

  • Published